Saudi National Cybersecurity Authority
NCA ECC Workspace
A turnkey environment for the NCA Essential Cybersecurity Controls (ECC-1:2018). Map all 114 controls across 5 domains, manage cyber risks, and produce Arabic-ready evidence packs for NCA reviews.
01Inside the workspace
Preloaded and ready on day one
Controls, evidence requests, and reporting views come configured, so your team starts on execution instead of setup.
- All 114 ECC controls pre-loaded across 5 domains
- NCA-aligned risk register with threat-vulnerability linkage
- Self-assessment workflows with maturity scoring
- Arabic-ready policy templates and approval workflows
- Third-party, cloud, and ICS control coverage
- NCA-ready dashboards and compliance reports
02FAQ
Questions we get asked
All 114 Essential Cybersecurity Controls (ECC-1:2018) across the five domains: governance, defence, resilience, third-party and cloud security, and industrial control systems. Each control is pre-mapped to evidence requirements and assessment criteria.
Saudi government entities and critical national infrastructure organisations, along with any entity the National Cybersecurity Authority directs to comply. The workspace is built for these entities with Arabic-ready policy templates and approval workflows.
Self-assessment workflows score each control with linked evidence, and NCA-ready dashboards roll results up into compliance reports. Evidence packs are exportable for NCA review at any time.
Yes. ECC controls are mapped to ISO 27001, NIST CSF, and SAMA CSF equivalents inside the configurable control library, so one implementation generates evidence across overlapping obligations.
See the NCA ECC Workspace in action
Book a session with our team and we will provision a sandbox tenant for your organisation with this workspace enabled.